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Claim Amendments (Listing); 

1-46. (Cancelled) 

47. (New) A method for managing authentication and authorization of user access to 
data applications of a service provider through a wireless communication network, comprising 
steps of: 

authenticating a mobile station of a data application user as a valid mobile station for 
obtaining communication service through the wireless communication network, at a control node 
of the wireless commimication network; 

obtaining from the control node information indicating successful authentication of the 
user's mobile station; 

receiving an identifier associated v^th the data application user, when the user attempts to 
access a data application on a server through the wireless communication network; 

based on the identifier, checking the information to determine if there has been a 
successful authentication of the user's mobile station at the control node of the wireless 
communication network; 

if the determination is that there has been a successful authentication of the user's mobile 
station at the control node of the wireless communication network, using the identifier to 
determine if the user is authorized to access the data application on the server, from among a 
plurality of data applications accessible through the wireless communication network; and 

if the user is authorized to access the data application on the server, allowing the user to 
access the data application on the server from the mobile station via communications through the 
wireless communication network. 
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48. (New) The method of claim 47, wherein the steps of authenticating, determining 
authorization of the user and allowing the user to access the data application on the server do not 
require user input of a password. 

49. (New) The method of claim 47, wherein: 

the control node is a home location register (HLR) of the wireless communication 
network; and 

the steps of obtaining information indicating successful authentication of the user's 
mobile station, receiving the identifier associated with the data application user and checking the 
information to determine if there has been a successful authentication are performed in an 
Authentication, Authorization, and Accounting (AAA) server of the wireless communication 
network. 

50. (New) The method of claim 49, wherein the step of obtaining information 
indicating successful authentication of the user's mobile station from the control node comprises: 

periodically querying the HLR for information as to mobile stations that have been 
authenticated; and 

storing identifications of HLR authenticated mobile stations in the AAA server. 

51. (New) The method of claim 49, wherein the step of obtaining information 
indicating successful authentication of the user's mobile station from the control node comprises 
querying the HLR regarding the user's mobile station upon receiving the identifier associated 
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with the data application user, when the user attempts to access the data application on the server 
through the wireless communication network. 

52. (New) The method of claim 47, wherein the data application on the server offers 
a service for mobile station users from an operator of the wireless communication network. 

53. (New) The method of claim 52, wherein the determination if the user is 
authorized to access the data application on the server comprises determining one of a plurality 
of available levels of service to which the user is subscribed and whether access to the data 
application on the server is within the one subscribed level of service. 

54. (New) The method of claim 47, wherein the determination if the user is 
authorized to access the data application on the server comprises determining one of a plurality 
of available levels of service to which the user is subscribed and whether access to the data 
application on the server is within the one subscribed level of service. 

55. (New) The method of claim 47, further comprising receiving and validating a 
password of the user before allowing the user to access the data application on the server from 
the mobile station via communications through the wireless communication network, 

56. (New) The method of claim 55, wherein the password of the user is the same 
password that would be validated before granting access to the application on the server if the 
user attempted access via a network other than the wireless communication network. 
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57. (New) A system, comprising: 

a wireless network for providing mobile communication services to and from a plurality 
of mobile stations; 

a control node for authenticating one of the mobile stations of a data application user as a 
valid mobile station for obtaining communication service through the wireless network; 

a data application server, coupled to the wireless network for providing a data application 
service via the network; and 

an authentication and authorization server, wherein the authentication and authorization 
server is configured for: 

(a) obtaining from the control node information indicating successful 
authentication of the data application user's mobile station; 

(b) receiving an identifier associated with the data application user from the 
data application server, when the user attempts to access the data application service on 
the data application server through the wireless communication network; 

(c) based on the identifier, checking the information to determine if there has 
been a successful authentication of the user's mobile station at the control node of the 
wireless communication network; 

(d) if the determination is that there has been a successful authentication of 
the user's mobile station at the control node of the wireless communication network, 
using the identifier to determine if the user is authorized to access the data application on 
the server, from among a plurality of data applications accessible through the wireless 
communication network; and 
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(e) if the user is authorized to access the data application on the server, 
enabling the data application server to permit the user to access the data application 
service from the mobile station via communications through the wireless communication 
network. 

58. (New) The system of claim 57, wherein: 

the control node comprises a home location register (HLR); and 

the authentication and authorization server comprises an Authentication, Authorization, 
and Accounting (AAA) server. 

59. (New) The system of claim 57, wherein: 

the data application server is operated by a wireless carrier that operates the wireless 
network; and 

the data application service is a data service offered by the carrier for mobile station 

users. 

60. (New) The system of claim 57, wherein the data application server is operated by 
a party other than a wireless carrier that operates the wireless network. 

61. (New) The system of claim 57, wherein the data application server is also 
accessible via a communication network other than the wireless communication network. 
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